SQS/SNS connection to endpoint timeout

0

Hi guys,

We have 2 ec2 instances lets call them ServerA (old instance) and ServerB (new instance). ServerB is image of ServerA and have identical permissions, security groups and configuration as ServerA and use the same network and VPN. Now we want to shut down the old server and start using the new one. On the old server SQS/SNS services seems to work partly, at least we can list the topics, which we can't do with ServerB. The only difference between these instances is that, the old server use the old endpoint URL's and the new one the new endpoints. Locally with ServerB we can use the AWS CLI and run commands, but from the new instance the SNS/SQS connection is timing out without any error. I can confirm other services like ec2, IAM, VPC and so on works fine from the server.

Do we miss something to configure or have to update for the new instance to be able to connect with SNS/SQS services?

Below you can find more information about the OSs: ServerA: NAME="Amazon Linux" VERSION="2" ID="amzn" ID_LIKE="centos rhel fedora" VERSION_ID="2" PRETTY_NAME="Amazon Linux 2" ANSI_COLOR="0;33" CPE_NAME="cpe:2.3:o:amazon:amazon_linux:2" HOME_URL="https://amazonlinux.com/"

$ aws --version aws-cli/1.16.300 Python/2.7.16

ServerB:

NAME="Amazon Linux" VERSION="2023" ID="amzn" ID_LIKE="fedora" VERSION_ID="2023" PLATFORM_ID="platform:al2023" PRETTY_NAME="Amazon Linux 2023" ANSI_COLOR="0;33" CPE_NAME="cpe:2.3:o:amazon:amazon_linux:2023" HOME_URL="https://aws.amazon.com/linux/" BUG_REPORT_URL="https://github.com/amazonlinux/amazon-linux-2023" SUPPORT_END="2028-03-01"

$ aws --version aws-cli/2.11.20 Python/3.11.3

I can't provide with any error because there isn't.

Regards, Ivo

2개 답변
1
수락된 답변

Can you confirm you have vpc endpoints setup for sns and sqs? Sounds like they are not setup or the SG doesn’t allow access

Can you confirm the rules of the security group assigned to the endpoint

Can you confirm they are on the same subnet and if you have any NAT gateways in place.

Do your ec2’s have public IP addresses?

Not sure what you mean old urls and new urls

profile picture
전문가
답변함 일 년 전
0

Thank you, Gary!

The problem was missing security group inbound rule for the connection between the server and the SNS/SQS VPC endpoint.

Regards, Ivo

Ivo
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠